Senior IT Security & Risk Engineer: SOX Controls Lead

Cardinal Health; Carson City (NV); On-site; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

Paid time off plan

401k savings plan

HSA

Job summary

Cardinal Health seeks an experienced Senior Engineer, Information Security & Risk to lead IT SOX control design and assessment. You will work with IT and business leaders to implement controls, align with audits, and drive continuous improvement across the risk governance process.

You will mentor junior staff, support budgeting for the compliance workstream, and engage with auditors for SOC1/2 activities, ensuring robust risk management practices across the organization.

Qualifications

• Bachelor’s degree or equivalent experience with IT risk/audit focus.
• Deep knowledge of IT SOX controls and audit methodologies.
• Familiarity with HIPAA, GDPR, PCI is a plus.

Responsibilities

• Define and implement IT SOX controls with design and remediation focus.
• Perform IT risk assessments for pilot areas and guide remediations.
• Coordinate with IT stakeholders to meet SOX compliance goals.
• Improve IT controls to increase efficiency and reduce failures.
• Monitor control execution and address issues with governance.
• Support due diligence for M&A activities and third-party certifications.
• Collaborate with internal/external audits on scope and strategy.
• Lead remediation tracking and budget communication with stakeholders.

Skills

IT SOX controls

IT risk assessment

Stakeholder education

Root cause analysis

Risk-based judgement

Multi-tasking

ERP SAP knowledge

Communication skills

Education

Bachelor’s degree in related field or equivalent

Tools

Archer

AuditBoard

ServiceNow GRC

Job description

Cardinal Health seeks an experienced Senior Engineer, Information Security & Risk to lead IT SOX control design and assessment. You will work with IT and business leaders to implement controls, align with audits, and drive continuous improvement across the risk governance process.

You will mentor junior staff, support budgeting for the compliance workstream, and engage with auditors for SOC1/2 activities, ensuring robust risk management practices across the organization.